Rapido Data Leak: Information of thousands of drivers and users leaked from Rapido app, increased risk of cyber attack.

New Delhi. Bengaluru-based ride-hailing platform Rapido recently patched a security flaw that led to sensitive information of users and drivers being leaked online. Security researcher Ranganathan P found a flaw in a feedback form on Rapido's website that leaked the names, email addresses and phone numbers of auto-rickshaw users and drivers, TechCrunch reported.

Read:- Threat looms again on the security of Google Chrome users, know what to do for protection?

The researcher explained that the leaked information was linked to an API of Rapido, which was designed to collect information from feedback forms and share it with a third-party service. TechCrunch sent a general message via the feedback form confirming the report, which appeared in the leaked portal a short while later. According to the report, the leaked portal contained more than 1,800 feedback responses, which included phone numbers and some email addresses of many drivers.

The researcher warned that this could create a huge scam, in which fraudsters or hackers could call drivers and conduct large-scale social engineering attacks, or sell these phone numbers and other data on the dark web.

When TechCrunch contacted Rapido about the data leak, the company made the leaked portal private. At present, Rapido has not issued any official statement on this issue. Rapido, which is currently considered an affordable alternative to Uber and Ola, is now under investigation due to this data leak.

Comments are closed.